Can syslog alerts be emailed? Can you customize what syslog alerts should be sent?
Yes, Syslog alerts are configured similar to other alerts in Orion and an email action is one of the options. Within that email alert you have the option to send the syslog message that tripped the alert as a variable.
Which syslogs trip the alert is completely customizable using regular expression.
Hope this helps.
In case you are curious how to configure these syslog alerts, go to the console of your primary Orion server and launch the Syslog Viewer application. Once in there click on View --> Alerts/Filter Rules.
Once in there you can create syslog alert rules. Keep in mind that these rules are processed in the order in which they appear in the list and as an alert you have the option to stop them from processing against further rules as well as keeping them from getting logged to the DB and kept. Managing these options becomes important for your rules to function properly.
I do not see the View --> alerts/filter rule options from the syslog menue in orion.
Nevermind. You meant the actually physical server not the orion we web console. Thanks.
Whoa, can you point me to some documents on how to configure this?
I took a look and it looks like the NPM Admin Guide doesn't really cover configuration for this. However, it's pretty straight forward. Just keep in mind that it processes all logs against the rules in the order that they appear. If there are logs that you don't want processed against the rules you need your first rule configured with an action to stop processing and discard for the logs that you don't want processed.
If you have specific questions on how to configure this please let us know and I am sure the community will be able to help you.
I have tried to configure an alert to email me when an interface changes its state to down but I am not having any luck. I basically want to be email anytime an interface goes down or in err-disabled status for port security reasons. Suggestions anyone?
Can you see those syslog messages in your system? If so can you post a screenshot of the syslogs that you want alerts for along with the alert that you have configured.
